cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements

Conversion tool - CheckPoint FW to Cisco ASA

22631
Views
5
Helpful
25
Comments
Cisco Employee

Cisco has recently opened up a self-service tool to convert CheckPoint Firewall configurations to Cisco ASA configs.

https://fwmig.cisco.com/

It is open to all the users registered on the Cisco website.

Try it out and let us know your feedback

The same tool also supports the migration of Juniper Netscreen Firewall configurations to Cisco ASA

https://supportforums.cisco.com/community/netpro/security/firewall/blog/2013/09/27/conversion-tool-juniper-screenos-to-cisco-asa

Thanks

Anand

25 Comments
Beginner

Hi Anand,

link https://fwmig.cisco.com/ shows

"

Page Unavailable - Server Unavailable Error 503"

is the service down?

Beginner

Hello Anand,

Thank you for the Migration tool.

I have went through the data collection stage and it has been mention 8 files should be present with zip but after running checkpoint Web Visualization Tool i do have a single HTML file.

i can have route.txt file but how to collect remaining 7 files ?

Beginner

I have same doubt ..

any resolution which has sorted this problem ?

please share with me 

Cisco Employee

Hi Vijay

If you follow the Data Collection steps given exactly, then you will get those 7 XML files. Otherwise usually the output is a single HTML file which is actually a combined version of those XML files itself.

Beginner

Is there a way to set the "Use global ACL" to no?

hi.  i ran the migration tool and it worked for me.  however, what version of asa does is the output applicable to?  is it applicable to 9.x version?

 

sorry found it on faq's.  thanks

Beginner

I'm trying to migrate from a checkpoint but seem to have an issue with my route.txt

ERROR: No default route found, hence cannot continue further

here is a snippet of the file 

INTERFACE|SUBNET|MASK|0.0.0.0|INTERFACENAME
INTERFACE|10.5.250.16|255.255.255.240|143.5.250.22|eth-s1/s1p1c0
INTERFACE|10.125.76.80|255.255.255.240|155.125.76.86|eth-s1/s1p1c2
INTERFACE|192.168.0.2|255.255.255.224|192.44.118.37|eth-s1/s1p2
INTERFACE|127.0.0.1|255.0.0.0|0.0.0.0|loopback0
ROUTE|SUBNET|MASK|NEXT-HOP|INTERFACENAME
ROUTE|0.0.0.0|0.0.0.0|192.168.0.1|eth-s1/s1p2c0

Beginner

Has the tool moved or been taken down? The page is now showing 503 unavailable

Beginner

@mjwulff01, i'm seeing the same thing.  Hopefully cisco get's it back.

Beginner

I am currently trying to use the conversion tool for checkpoint to ASA to Firepower migration.
I have downloaded the Web Visualization Tool (WVT) from Checkpoint website, but each time I try to install the exec file on my PC, I see the error below

""The code execution cannot proceed because OS.dll was not found. Reinstalling the program may fix this problem"

 

Can anyone suggest how  can resolve this as I have tried to reinstall the program severally.